Privacy & Data Protection

This Privacy & Data Protection Policy (“Policy”) governs the collection, processing, usage, disclosure, retention, and protection of information by PropertyScout.lk (“Platform”, “Property Scout”, “we”, “us”, “our”).

By creating an account, using the Platform, uploading content, or interacting with Services, Users (“you”, “your”) acknowledge and accept the collection and processing of information in accordance with this Policy.

This Policy ensures transparency regarding:

• What data is collected
• Why it is collected
• How it is used
• How it is stored and protected
• When and with whom it is shared
• Users’ legal rights concerning their data

The Platform may collect the following categories of data:

3.1 Account & Profile Information

• Full name
• Email address
• Phone number
• Password
• Profile photograph (optional)

3.2 Verification Information

Provided voluntarily during verification:

• National ID or passport
• Proof of address (e.g., utility bill)
• Business registration documents and proof of authority (for agents or organizations)

3.3 Property & Requirement Data

• Listing descriptions, images, videos, reference documents
• Property price, type, specifications, and availability
• Buyer requirements and preferences

3.4 Device, Cookies & Usage Data

• IP address and geolocation (approximate)
• Browser type, operating system, device model
• Session durations, login timestamps, click activity, and referral links
• Cookies and similar tracking technologies

3.5 Communications

• Messages exchanged within the Platform
• Inquiry history
• Support communications with Property Scout

Processing of personal data may be based on:

• Contractual necessity (to provide Services)
• Legitimate interests (fraud prevention, platform safety, service improvement)
• User consent (where explicitly required)
• Compliance with applicable law

Data may be used for:

• Matchmaking and listing display
• Verification and trust enhancement
• Notifications and communication
• Subscription and payment processing
• Fraud prevention and risk mitigation
• Analytics and platform development (present and future)
• Customer support and troubleshooting

Data is never sold or traded.

Data may be shared only, when necessary, with:

Personal contact information is never publicly displayed or shared without user consent.

Backups may persist for a limited period after deletion requests due to system constraints.

Property Scout implements industry-standard security protocols including:

• Encrypted database storage (AES-256)
• TLS/HTTPS communication channels
• Role-based limited staff access
• Regular security monitoring

Despite best efforts, no digital system can guarantee absolute security.

Data may be transferred outside Sri Lanka for hosting or processing.

Such transfers are protected through:

• Encrypted transmission
• Contractual protections where applicable

Users may request:

• Access to their stored information
• Correction of inaccurate information
• Data deletion / account closure
• Restriction of processing (where legally applicable)
• Data export (where possible)

We may refuse requests that violate:

• Security requirements
• Legal obligations
• Privacy of other users

The Platform is not intended for persons under 18 years of age.

If such information is discovered, it will be deleted promptly.

Users may withdraw consent by deleting their account.

Withdrawal does not affect the legality of processing prior to withdrawal.

Property Scout may update this Policy from time to time.

Changes become effective upon posting on the Platform.

Continued use of Services constitutes acceptance of updated terms.

This Policy is governed exclusively by the laws of Sri Lanka.

If users have privacy-related questions or complaints, they may contact:

• support@propertyscout.lk